Cyber Information Assurance Analyst

The Pennsylvania State University; Reston (VA); On-site; USD 56,200 - 102,300; Full time

Benefits offered by this job

Comprehensive benefits package

75% tuition discount for employees

Paid time off

Job summary

A prominent educational institution is seeking a Cyber Information Assurance Analyst in Reston, VA. The role involves conducting risk assessments, managing compliance, and implementing cybersecurity measures. Candidates should have a Bachelor's degree in Information Technology or Cybersecurity and possess relevant experience. The position requires knowledge of Windows, Linux, and various vulnerability tools. This integral role supports national security through innovative solutions and offers a competitive salary and comprehensive benefits package.

Qualifications

• 1+ years of relevant experience or equivalent education.
• Development and maintenance of Security Assessment Plans and Risk Assessment Reports.
• Ability to multitask multiple programs.

Responsibilities

• Conduct risk assessments and recommend design improvements.
• Perform vulnerability assessments.
• Monitor corrective actions for audits.

Skills

Windows and Linux OS

Review of hardware and software vulnerabilities

Understand and enforce policies and procedures within classified space

Assured Compliance Assessment Solution (ACAS)

Security+

Active security clearance, Top-Secret level

Education

Bachelor's Degree in Information Technology or Cybersecurity

Tools

JIRA

Confluence

GitLab

Ansible

Vulnerability scanning tools

Job description

Overview

We are searching for a Cyber Information Assurance Analyst to join the Risk Management Department in Reston, VA, in the Applied Research Laboratory (ARL) at Penn State. The CIAA evaluates system and network environments to implement effective cybersecurity programs and determines security controls and policies based on best practices, regulations, and contractual requirements. This role includes managing compliance assessments, mitigating risks to information systems, and ensuring confidentiality, integrity, and availability. The CMS Division leverages M&S expertise and other resources to deliver prototypes, demonstrations, and accelerated transitions of emerging research and technologies vital to national security needs, in addition to performing research, development, testing, and evaluations facilitating innovation in practice and development of critical, in-demand capabilities.

ARL is an authorized DoD SkillBridge partner and welcomes all transitioning military members to apply.

You will

• Conduct risk assessments and provide recommendations for system, network, and application design, implementation, and operation of departmental systems
• Conduct vulnerability assessments of departmental systems and networks to identify deviations from acceptable configurations or policies
• Meet with stakeholders regularly to assess needs and requirements at a departmental level
• Monitor the corrective actions of departmental system audits; draft documentation of Plan of Action and Milestones (POAM) for review
• Obtain certification and accreditation for departmental systems through the creation of process documentation support; may assist with unit or University wide process documentation
• Participate in the establishment of program control processes to ensure risk mitigation
• Perform periodic audits of departmental systems under general supervision
• Participate in the implementation of required policies, procedures, and configurations; make recommendations for improvements
• Participate in the preparation of requirements and procedures for forensic preservation
• Research and stay current on industry best practices

Additional responsibilities for higher level position includes:

• Lead risk assessments and provide recommendations for system, network, and application design, implementation, and operation of unit-wide systems
• Lead vulnerability assessments of unit-wide systems and networks to identify deviations from acceptable configurations or policies; conduct assessments of non-standard systems
• Monitor the corrective actions of unit-wide system audits; develop and manage Plan of Action and Milestones (POAM)
• Meet with stakeholders regularly to assess needs and requirements at a unit-wide level
• Obtain certification and accreditation through the creation of process documentation; develop unit or University-wide process documentation
• Establish program control processes to ensure risk mitigation
• Perform periodic audits of systems
• Implement required policies, procedures, and configurations; make recommendations for improvements
• Develop requirements and procedures for forensic preservation
• Assist in the development of policy, process, and standards of Cyber Incident Response Team (CIRT) program and participate in CIRT activities as needed
• Assist in the development and delivery of information security training material
• May interface with external entities including law enforcement and intelligence/government agencies
• May provide guidance to lower level Analysts

Required skills/knowledge

• Windows and Linux OS
• Review of hardware and software vulnerabilities
• Understand and enforce policies and procedures within classified space
• Assured Compliance Assessment Solution (ACAS) and Security Technical Implementation Guide (STIG)
• Ability to multitask multiple programs
• Security+, CAP, GSEC or equivalent
• Active security clearance, at the Top-Secret level and possession of or eligible for SCI level

Preferred Skills/Knowledge

• Development and maintenance of Security Assessment Plans, Risk Assessment Reports, and POAMs
• Containerized environments
• GitLab and Ansible
• JIRA and Confluence
• Vulnerability scanning tools (ACAS, OpenSCAP, Trivy, Grype, etc.)
• Bachelor’s degree in Information Technology, Cybersecurity or related field

Your working location will be in Reston, VA. Questions related to flexible work should be directed to the hiring manager during the interview process. Travel is expected to be at 50% of the time to surrounding areas.

Minimum Education, Work Experience & Certifications

If filled as Cyber Information Assurance Analyst - Intermediate Professional, this position requires: Bachelor's Degree and 1+ years of relevant experience; or an equivalent combination of education and experience accepted. Required Certifications: None.

If filled as Cyber Information Assurance Analyst - Professional, this position requires: Bachelor's Degree. No prior relevant work experience required; previous relevant work experience accepted in lieu of education. Required Certifications: None.

Application Instructions

Current Penn State employees or students should log in to Workday to complete the internal application process. Please do not apply here; apply internally through Workday. If you are not a current employee or student, please click Apply and complete the external applicant process.

Approval of remote and hybrid work is not guaranteed regardless of work location. For additional information on remote work at Penn State, see Notice to Out of State Applicants.

Additional Information

ARL’s purpose is to research and develop innovative solutions to challenging scientific, engineering, and technology problems in support of the Navy, the DoD, and the Intel Community (IC). ARL supports background checks, security clearances where applicable, and standard employment background checks. You must be a U.S. citizen to apply. Employment may require a pre-employment drug screen. The salary range is $56,200.00 - $102,300.00, with geographic differential potentially applying. Penn State provides a comprehensive benefits package including medical, dental, vision, retirement plans, paid time off, and a 75% tuition discount for employees and eligible dependents. For more details, see the Benefits Page. Penn State is an equal opportunity employer. If you cannot use our online process due to disability, please contact 814-865-1473.

EEO IS THE LAW

Penn State is an equal opportunity employer committed to employment opportunities for all qualified applicants without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.